Search for packages
Package details: pkg:pypi/lxml@4.6.3
purl pkg:pypi/lxml@4.6.3
Next non-vulnerable version 4.9.1
Latest non-vulnerable version 4.9.1
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-gufu-nks1-aaag
Aliases:
CVE-2022-2309
GHSA-wrxv-2j5q-m38w
PYSEC-2022-230
NULL Pointer Dereference in lxml
4.9.1
Affected by 0 other vulnerabilities.
VCID-ub64-azys-aaaf
Aliases:
CVE-2021-43818
GHSA-55x5-fj6c-h6m8
PYSEC-2021-852
lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.
4.6.5
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jq1x-31sj-aaas An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3. CVE-2021-28957
GHSA-jq4v-f5q6-mjqq
PYSEC-2021-19

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T15:59:15.737082+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 36.1.3
2025-06-20T15:59:14.702543+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 36.1.3
2025-06-20T15:23:24.476627+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 36.1.3
2025-06-20T15:23:23.846220+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 36.1.3
2025-06-20T15:15:21.539427+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag None 36.1.3
2025-06-20T15:15:21.088551+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 36.1.3
2025-06-05T09:57:30.573951+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag None 36.1.0
2025-06-05T09:57:30.250546+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 36.1.0
2025-06-03T22:39:48.094311+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 36.1.0
2025-06-03T22:39:46.963421+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 36.1.0
2025-06-03T22:05:01.332423+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 36.1.0
2025-06-03T22:05:00.697693+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 36.1.0
2025-06-03T00:08:04.809230+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag None 36.1.2
2025-06-03T00:08:04.419879+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 36.1.2
2025-06-02T22:28:30.451103+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 36.1.2
2025-06-02T22:28:29.420387+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 36.1.2
2025-06-02T21:51:39.632613+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 36.1.2
2025-06-02T21:51:38.992043+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 36.1.2
2025-04-03T20:08:09.507275+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 36.0.0
2025-04-03T20:08:07.083142+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 36.0.0
2025-04-03T19:04:31.401844+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 36.0.0
2025-04-03T19:04:29.574649+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 36.0.0
2025-04-03T15:08:45.582006+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag None 36.0.0
2025-04-03T15:08:44.528353+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 36.0.0
2025-02-18T02:30:07.016064+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 35.1.0
2025-02-18T02:30:06.124730+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 35.1.0
2025-02-18T00:36:45.495514+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 35.1.0
2025-02-18T00:36:44.578561+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 35.1.0
2025-02-17T19:26:42.614249+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 35.1.0
2025-02-17T19:26:39.949495+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag None 35.1.0
2025-01-17T07:57:25.059250+00:00 PyPI Importer Affected by VCID-gufu-nks1-aaag None 35.1.0
2025-01-17T02:37:55.266637+00:00 GHSA Importer Fixing VCID-jq1x-31sj-aaas None 35.1.0
2024-11-21T00:26:27.088720+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 35.0.0
2024-11-20T23:16:03.839555+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 35.0.0
2024-11-20T19:56:12.347201+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 35.0.0
2024-11-19T00:06:54.361574+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 34.3.2
2024-11-18T23:03:37.961349+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 34.3.2
2024-11-18T20:02:05.859330+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 34.3.2
2024-10-15T18:43:03.515037+00:00 GithubOSV Importer Fixing VCID-jq1x-31sj-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/03/GHSA-jq4v-f5q6-mjqq/GHSA-jq4v-f5q6-mjqq.json 34.0.2
2024-10-08T00:50:53.897716+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 34.0.2
2024-10-08T00:02:46.986214+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 34.0.2
2024-10-07T20:07:39.209665+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 34.0.2
2024-10-07T19:53:04.436747+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf https://github.com/advisories/GHSA-55x5-fj6c-h6m8 34.0.2
2024-09-23T00:59:46.600046+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 34.0.1
2024-09-23T00:16:26.596819+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 34.0.1
2024-09-22T20:51:36.269385+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 34.0.1
2024-09-22T20:38:48.934069+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf https://github.com/advisories/GHSA-55x5-fj6c-h6m8 34.0.1
2024-09-18T12:26:02.886931+00:00 Pypa Importer Affected by VCID-gufu-nks1-aaag https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2022-230.yaml 34.0.1
2024-09-18T12:25:17.218956+00:00 Pypa Importer Affected by VCID-ub64-azys-aaaf https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2021-852.yaml 34.0.1
2024-09-18T12:11:32.747044+00:00 Pypa Importer Fixing VCID-jq1x-31sj-aaas https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2021-19.yaml 34.0.1
2024-09-18T09:04:42.987597+00:00 GithubOSV Importer Fixing VCID-jq1x-31sj-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/03/GHSA-jq4v-f5q6-mjqq/GHSA-jq4v-f5q6-mjqq.json 34.0.1
2024-09-17T23:15:23.838631+00:00 PyPI Importer Affected by VCID-gufu-nks1-aaag https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.1
2024-09-17T23:00:03.608544+00:00 PyPI Importer Fixing VCID-jq1x-31sj-aaas https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.1
2024-09-17T22:29:49.503711+00:00 GitLab Importer Fixing VCID-jq1x-31sj-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-28957.yml 34.0.1
2024-09-17T22:13:46.256434+00:00 GHSA Importer Fixing VCID-jq1x-31sj-aaas https://github.com/advisories/GHSA-jq4v-f5q6-mjqq 34.0.1
2024-04-24T03:15:33.067254+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 34.0.0rc4
2024-04-24T03:15:32.133303+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 34.0.0rc4
2024-04-24T02:24:25.382824+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 34.0.0rc4
2024-04-24T02:24:24.437497+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 34.0.0rc4
2024-04-23T23:01:04.428276+00:00 GithubOSV Importer Fixing VCID-jq1x-31sj-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/03/GHSA-jq4v-f5q6-mjqq/GHSA-jq4v-f5q6-mjqq.json 34.0.0rc4
2024-04-23T22:24:49.853583+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 34.0.0rc4
2024-04-23T22:24:47.147406+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag None 34.0.0rc4
2024-04-23T22:04:41.689976+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf https://github.com/advisories/GHSA-55x5-fj6c-h6m8 34.0.0rc4
2024-04-23T22:04:40.693754+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf None 34.0.0rc4
2024-01-10T05:55:06.496378+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 34.0.0rc2
2024-01-10T05:55:05.592975+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 34.0.0rc2
2024-01-10T04:59:22.469455+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 34.0.0rc2
2024-01-10T04:59:21.580569+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 34.0.0rc2
2024-01-10T00:22:04.907014+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag https://github.com/advisories/GHSA-wrxv-2j5q-m38w 34.0.0rc2
2024-01-10T00:22:02.345988+00:00 GHSA Importer Affected by VCID-gufu-nks1-aaag None 34.0.0rc2
2024-01-10T00:01:31.925458+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf https://github.com/advisories/GHSA-55x5-fj6c-h6m8 34.0.0rc2
2024-01-10T00:01:30.904449+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf None 34.0.0rc2
2024-01-03T22:43:08.683365+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf None 34.0.0rc1
2024-01-03T22:43:07.707841+00:00 GitLab Importer Affected by VCID-ub64-azys-aaaf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-43818.yml 34.0.0rc1
2024-01-03T21:47:08.391707+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2022-2309.yml 34.0.0rc1
2024-01-03T21:47:07.390995+00:00 GitLab Importer Affected by VCID-gufu-nks1-aaag None 34.0.0rc1
2024-01-03T19:46:55.790508+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf https://github.com/advisories/GHSA-55x5-fj6c-h6m8 34.0.0rc1
2024-01-03T19:46:54.782827+00:00 GHSA Importer Affected by VCID-ub64-azys-aaaf None 34.0.0rc1
2024-01-03T18:52:00.655517+00:00 PyPI Importer Affected by VCID-gufu-nks1-aaag https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.0rc1
2024-01-03T18:41:20.402918+00:00 PyPI Importer Fixing VCID-jq1x-31sj-aaas https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip 34.0.0rc1
2024-01-03T18:27:44.451850+00:00 Pypa Importer Fixing VCID-jq1x-31sj-aaas https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2021-19.yaml 34.0.0rc1
2024-01-03T18:27:43.673529+00:00 Pypa Importer Affected by VCID-ub64-azys-aaaf https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2021-852.yaml 34.0.0rc1
2024-01-03T18:27:42.889123+00:00 Pypa Importer Affected by VCID-gufu-nks1-aaag https://github.com/pypa/advisory-database/blob/main/vulns/lxml/PYSEC-2022-230.yaml 34.0.0rc1
2024-01-03T17:55:00.751944+00:00 GitLab Importer Fixing VCID-jq1x-31sj-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/lxml/CVE-2021-28957.yml 34.0.0rc1
2024-01-03T17:43:56.258752+00:00 GHSA Importer Fixing VCID-jq1x-31sj-aaas https://github.com/advisories/GHSA-jq4v-f5q6-mjqq 34.0.0rc1